uat.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b1:a2:80:f7:b8:9c:45:d4:0a:32:e3:cd:20:fa:09:f8:af was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uat.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b1:a2:80:f7:b8:9c:45:d4:0a:32:e3:cd:20:fa:09:f8:af
Serial Number (int): 321782841313983414885566617551798799038639
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 26:5e:ba:a1:b9:ea:80:8c:8a:a9:46:2d:6b:df:d9:b9:6a:69:95:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ac:18:98:43:18:54:6d:33:29:a3:37:78:12:ab:31:54:d0:96:b2:3a
Fingerprint (sha256): 39:45:f5:7e:01:34:a8:19:e4:65:d3:63:d8:a4:1f:45:87:49:f1:82:4a:f3:cc:43:7c:76:c6:03:27:ef:1e:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate uat.jucy.co.nz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat.jucy.co.nz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat.jucy.co.nz
www.uat.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)
loadbalancer.nix.jucy.co.nz
citrix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
sni.cloudflaressl.com
*.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
photos.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
mail.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
www.jucyrentals.de
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
jucy.co.nz
bookings.jucy.co.nz
sni.cloudflaressl.com
secure.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
*.jucy.co.nz
secure.jucy.co.nz
jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
photos.jucy.co.nz

Certificate

The complete raw certificate details for uat.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321782841313983414885566617551798799038639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 13:00:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 13:00:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 647064357757842826615480943375599480279769691235004473084429177920631828903008378918919990553872031863347299968467614755271932803078663057056230029632474600121926042614747417583625092016570962372567860685055250417784136518959784296707556995685283717812057013894613392054998266793258721225597600441423576719559392609856808457156119406002917706724924124669438604161811430181974117992394274965014210876287008090240377092698511864871279915630518351929148738887687411817830037378558583570093853055589419323031838421482022261421946193658941836092184410688298517808981422471804036124079466103550525100049061514609075554733226035616295922651133413448172763363321164594348639753912994068213195012358023363304015360568238976529877192363381217504774080039786604104948156005384061880324294775809946408640432519085497451097742026665613102926153204932475427369985668542442465353672389977831901578269846067372097115363777551831809416718558661688340084510959641662931563691446771397289193070571011805541828572944169539661731200017556812043208934470888981707342567801886249871626705877572439840988895812779795549847562751619359047979893241156509218368696677591901316890842804322817869220484913771447534800932892577929413532952080651305175250536189261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							265ebaa1b9ea808c8aa9462d6bdfd9b96a699552
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uat.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001703ed9f4a40000040300473045022100c61e8c1af169c752bd9122311d2c3c033fda1c5a00f78098853d72352fca167a02205fca0ebe8098db03ccf61e77623357d58c38595a5522e2eb441dc2b24e2eb6a6007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001703ed9f48b00000403004630440220348b85aa15879e8b7a813757131100d0643cd758851c9250869fbf0954d5b25702202dad25e47897d363c4e363bb461b739c78696e6b81883a8bb09caf240e67b0df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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